CVE-2025-50065
📊 3.7 LOW⚡ 0.1%🎯 0 exploits
📅 Published Jul 15, 2025
📋 Status: Analyzed
Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Native Image). The supported version that is affected is Oracle GraalVM for JDK: 24.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM for JDK. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
CVSS v3.1 • [email protected]
🎯 Affected Products & Systems
1 product configurations affected
Filter by type:
| Type | Vendor | Product | Version Range | Status | CPE String |
|---|---|---|---|---|---|
📱App | oracle | graalvm for jdk | 24.0.1 | Vulnerable | cpe:2.3:a:oracle:graalvm_for_jdk:24.0.1:*:*:*:*:*:*:* |
📱
VulnerableApplication
Version: 24.0.1
CPE:
cpe:2.3:a:oracle:graalvm_for_jdk:24.0.1:*:*:*:*:*:*:*
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector:
NETWORK
Complexity:
HIGH
Privileges:
NONE
User Interaction:
NONE
Confidentiality:
NONE
Integrity:
NONE
Availability:
LOW
Scope:
UNCHANGED
🔍 Technical Details
Analysis Status
AnalyzedCVSS Details
3.7 (LOW)v3.1
Source: [email protected]
EPSS Details
0.1% (Minimal)17.2th percentile
Last updated: Nov 1, 2025
Exploitation probability within 30 days
Published Date
Jul 15, 2025 (3 months ago)
Last Modified
Aug 4, 2025 (3 months ago)
Security Weaknesses1
CWE-269
References2
NVDgeneral